id: "CP-02(06)" title: "Alternate Processing and Storage Sites" family: "CP" family_name: "Contingency Planning" sort_id: "cp-02.06" priority: "P2" implementation_level: "organization" parent: "CP-02" enhancement: True


Statement

Plan for the transfer of {{ insert: param, cp-02.06_odp }} mission and business functions to alternate processing and/or storage sites with minimal or no loss of operational continuity and sustain that continuity through system restoration to primary processing and/or storage sites.

Guidance

Organizations may choose to conduct contingency planning activities for alternate processing and storage sites as part of business continuity planning or business impact analyses. Primary processing and/or storage sites defined by organizations as part of contingency planning may change depending on the circumstances associated with the contingency.

Assessment Objective: the transfer of {{ insert: param, cp-02.06_odp }} mission and business functions to alternate processing and/or storage sites with minimal or no loss of operational continuity is planned for;

Assessment Objective: operational continuity is sustained until full system restoration at primary processing and/or storage sites.

Contingency planning policy

procedures addressing contingency operations for the system

contingency plan

business impact assessment

alternate processing site agreements

alternate storage site agreements

contingency plan testing documentation

contingency plan test results

system security plan

other relevant documents or records

Organizational personnel with contingency planning and plan implementation responsibilities

organizational personnel with knowledge of requirements for mission and business functions

organizational personnel with information security responsibilities

Organizational processes for transfer of essential mission and business functions to alternate processing/storage sites